We have added a DGA detection package to the Integrations app in Kibana. In a single click, you can install and start using the DGA model and associated assets, including ingest pipeline configurations, anomaly detection jobs, and detection rules.

Step 1: Installing the package assets

Step 2: Enriching your data

Step 3: Running anomaly detection

Step 4: Enabling the rules

Detect domain generation algorithm (DGA) activity with new Kibana integration

We added a Living off the land (LotL) detection package to the Integrations app in Kibana. In a single click, you can install and start using the ProblemChild model and associated assets including anomaly detection configurations and detection rules.

作者

梅丽莎·阿尔瓦雷斯

文章

通过新的 Kibana 集成检测域名生成算法 (DGA) 活动

通过新的 Elastic 集成检测 Living-off-the-land 攻击